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Typed operational semantics is a method developed by H. Goguen to prove meta-theoretic properties 
of type systems. This paper studies the metatheory of a type system with dependent record types, 
using the approach of typed operational semantics. In particular, the metatheoretical properties we 
have proved include strong normalisation, Church-Rosser and subject reduction. 



1 Introduction 



H. Goguen |Gog94[ |Gog99[ has developed a method called typed operational semantics (TOS for short) 
to prove meta-theoretic properties of type theories, including strong normalisation, Church-Rosser and 
subject reduction. In this paper, using the TOS approach, we study the meta-theoretic properties of a 
type system with dependent record types. 

A record type is a type of labelled tuples called records. A dependent record type (DRT) is a type 
of records whose fields may have types that depend on the values of earlier fields. Dependent records 
have been studied previously for various different type systems IIHL94[ IBT981 IPol02[ ICPT05L with 
applications to the study of module mechanisms for both programming and proof languages. Recently, 
in the context of studying manifest fields of module types, the second author has proposed a formulation 
of dependent record types l|Luo09bL for type theories with canonical objects such as Martin-Lof 's type 
theory, and shown in ||Luo09all that, in some applications, dependent record types are more useful than 
Z-types (dependent types of tuples without labels). 

Studying the meta-theory of dependent record types, the contributions of the current paper are two- 
fold. First of all, the meta-theory of dependent record types has not been well-studied. This work makes 
a positive contribution, showing that our formulation of dependent record types has the good meta- 
theoretic properties such as strong normalisation. Secondly, the type theory we study has record types 
as studied in ||Pol021 |Luo09bl . rather than record kinds as in [BT98 . iCPT05ll . Since types have a much 
more sophisticated structure than kinds, the meta-theory for dependent record types is expected to be 
much more difficult than that for dependent record kinds as found in, e.g., IICPT05I . We shall study the 
meta-theory by taking the TOS approach, which is shown to be robust enough to deal with dependent 
record types. In particular, we study the intensional DRTs, that is, the dependent record types without 
the so-called weakly extensional rules (these rules are considered in IILuo09bll ). The typed operational 
semantics for intensional DRTs is developed and shown to be sound and complete and, based on this, it 
is proved that the intensional DRTs have good meta-theoretic properties, including strong normalisation, 
Church-Rosser and subject reduction. 
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The paper is arranged as follows. The type system IDRT for intensional DRTs is described in Sec- 
tion |2] In Section [3] after introducing the basic idea of TOS, we define the TOS for dependent record 
types. The properties of the TOS are studied in Section |4] and the meta-theoretic properties of IDRT in 
Section |5] Discussions of related work and future work are given in the conclusion. 

2 Dependent Record Types 

A dependent record type is a type of labelled tuples whose fields may have types that depend on the 
values of earlier fields. For instance, if Nat and Vect{n) are the types of natural numbers and vectors of 
length n, respectively, {n : Nat, v : Vect{n)) is the dependent record type with objects (called records) 
such as {n = 2, v = [5,6]), where dependency is respected: the vector [5,6] must be of type Vect{2). 

Formally, in our study, dependent record types are formulated as an extension of the logical frame- 
work that we describe briefly first. 

Logical Framework. LF IILuo94i is the typed version of Martin-Lof 's logical framework IINPS90II . 
It is itself a type system that serves as a meta-language to specify type theories such as Martin-Lof 's 
intensional type theory fNPS901 and the Unifying Theory of dependent Types (UTT) pLuo94T. Here, we 
give only a brief introduction, fixing the notations to be used in the paper. (For details of, for example, 
how inductive types like Nat, Il-types and Z-types can be specified in the logical framework, see Part III 
of IINPS90II or Chapter 9 of IILuo94l .) 

In LF, the syntactical entities contexts, kinds and terms are of the following forms: 

Contexts T :: = () | T,x:A 
LF Kinds K :: = Type \ El{A) \ {x:K)K' 
LF Terms M :: = x\ [x:K]M \ M{M') 

The types in LF are called kinds, including: 

• Type - the kind representing the collection of all types (A is a type if A : Type); 

• El (A) - the kind of objects of type A (we often omit El); and 

• {x:K)K' (or simply {K)K' when x ^ FV{K')) - the kind of dependent functional operations. 
The judgement forms in LF include, for example, 

• r\- k : K, which asserts that k is an object of kind K; and 

• r \- k = k' : K, which asserts that k and k' are (computationally) equal objects of kind K. 

The inference rules of LF to define the typing relation and the computational equality are given in Ap- 
pendix|A] In particular, j3T] -equal objects are computationally equal. For instance, an abstraction [x:K]M 
can be applied to form {[x:K]M){a) that is computationally equal to [a/x]M. 

Notation We shall use = to denote the syntactical identity (up to a -conversion). 
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Dependent Record Types. We now give a formal presentation of the system IDRT of intensional 
dependent record types, which is an extension of LF. The syntax of this type system is given as follows, 
where ^ is an (infinite) set of labels, / G ^ and L C =Sf is finite: 

Kinds of Record Types Kr :: = RType \ RType[L] 
Record Types R :: = () | {R, I -.A) 

Records r :: = {) \ {r, 1 = a :A) 

The inference rules of IDRT consist of the rules for LF (Appendix|A]l and the additional rules in Figure [T] 
Here are some informal explanations. 

• We add new kinds RType and RType[L] of record types. Intuitively, RType[L] is the kind of the 
record types whose (top-level) labels are all in L, a finite set of labels. Naturally, if L C L', every 
record type in RType[L] is also in RType[L']. The kind RType is the kind of all record types and 
could conceptually be understood as 'RType[^y . Finally, every record type is also a type. These 
are formally reflected in the rules for the kinds of record types in Figure [T] 

• Record types are types of the form () or {R, I : A). Intuitively, a record type is of the form 
(Zi : Ai, In : A„){^where each /,• : A,- is afield labelled by /. An object of this record type is a 
labelled tuple {l\ = ai : Ai, /„ = a„ : A„), where a,- is of the type of the corresponding field. 
Note that, formally, each A,- in the record type is not a type, but a family of types; this is how 
dependency is incorporated - we have dependent record types. 

Notation-wise, we shall adopt the following notational conventions: for record types, we write 
{h :Ai, /„ :A„) for (((), li :Ai), Z„ :A„) and often use label occurrences/non-occurrences 
to show dependency/non-dependency respectively. For instance, we write {n : Nat, v : Vect{n)) 
for (((), n : NAT), v : [x:{n : NAT)]Vect{x.n)) where NAT = [_ :{)]Nat, and {R, 1 : Vect{2)) for 
{R, I: [_ -.RjVectil)). 

• There are two operations on records: restriction (or first projection) [r] that removes the last com- 
ponent of record r md field selection r.l that selects the value of the field labelled by /. For instance, 
intuitively, for the record r = {l\ =a\ : Ai, Z2 = £22 : A2, ^3 = (33 : A3) of type {l\ : Ai, Z2 : A2, /3 : A3), 
we have [r] = (Zi : Ai , /2 : A2) and r.h = [r] .l2 = <^2- These are formally reflected in the introduction, 
elimination and computation rules in Figure [T] 

• The congruence rules for record types and records in Figure[T]propagate the computational equality 
through the term structure. Also, we do not include the weakly extensional equality rules as 
considered in ||Luo09bll . Therefore, we call the system the type system for intensional DRTs. 

We shall adopt the following terminology: the terms of the form (r, I = a:A) will be called pair-records. 
(For example, we shall use this terminology in specifying the TOS -rules for record types in Figure [3] in 
Section [II|) 



Record types v.s. record kinds. It is worth pointing out that our type system contains dependent 
record types (as studied by Pollack ||Pol02L Luo l|Luo09b[ |Luo09all and the cunent paper), rather than 
dependent record kinds (as studied by Betarte and Tasistro IIBT98II and Coquand, Pollack and Takeyama 
IICPT05I ^. We would like to distinguish these two notions clearly: in a type theory with inductive types, 

'We overload the (...) notation for record.s and their types. It is always possible to distinguish between the two. 
^Types in the terminology of Martin-L6f 's type theory are what we call kinds in this paper. Therefore, the so-called record 
types in rBT98l and ICPT05I are really record kinds. 
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Kinds of record types 

T valid T valid 



T\- RType kind T h RType [L] kind 

r\-R: RType[L] LCL' T h 7? : RType[L] T h 7? : RType 
r\-R:RType[L'] r\-R: RType T h /? : Type 

Formation rules 

r valid r\-R: RType [L] T h A : (R) Type I ^ L 
rh {) : RType[Q)] Fh {R, I : A) : RType[LU {I}] 

Introduction rules 

Tvalid rh {R, l:A):RType Thr.R rha:A(r) 



rh():() r\-{r,l = a:A):{R,l:A) 

Elimination rules 

Thr:{R,l:A) T h r :(/?,/: A) 
r h [r] : /? Yhr.l:A{\r\) 

r\-r:{R, l:A) Th [r].Z':B l^l' 
r h r.V : B 

Computation rules 

r\-{r,l = a:A):{R, l:A) Fh {r, I = a : A) : {R, I : A) 



F\-[{r, l = a:A)]=r:R Th (r, I = a : A) .1 = a : A{r) 

F\-r:{R, I : A) Th [r\.l' -.B l^l' 
Fhr.V =[r\.l' -.B 

Congruence rules for record types 

F valid F\-R = R': RType[L] T h A = A' : {R)Type I ^ L 

r h = : RType[(b] Fh (/?,/: A) = {R' , I : A') : RType[LVJ {I}] 

Congruence rules for records 

FhR:RType[L] l^L 
Fvalid F\-r = r':R F \- a = a' : A{r) F \- A = A' : {R)Type 



rh = ():() rh (r, l = a:A) = {r', l = a':A') : {R, I -.A) 

F\-r = r' : {R,l:A) T h r = /:(/?,/: A) 
rh [r] = [r']:R F \- r.l = r' .1 : A{[r]) 



Figure 1: Inference Rules of IDRT 
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types include those such as Nat of natural numbers and E-types of dependent pairs, while the examples 
of kinds include, for example, the kind Type of all types. They exist at two completely different levels 
and have rather different structures and properties. 

In general, types have a much more sophisticated and richer structure than kinds. For instance, it is 
easy to show that a kind is of the form either Type or {x:K)K', but types are not (e.g., a type may be of 
the form f{a)). To appreciate the difference, let us consider the issue of ensuring label distinctness. If 
one considers only record kinds, it is easy to guarantee that the labels in the same record kind are distinct 
because of the limited syntactic forms of kinds (see, for example, IICPT05II ). However, this is not easy 
at all for record types (think, for example, how one ensures that a label does not occur in a type of the 
form f{a)). In our case, we have to introduce the kinds RType[L] to ensure that it is the case that the 
(top-level) labels in the same record type are distinct. In other words, intuitively, 1^1' for any record 
type (..., 1 : A, 1' : A', ...). This is guaranteed by means of the side condition Z L of the second 
formation rule in Figure [T] 

That a type system with record types is more powerful than one with only record kinds can be 
understood from another angle when one wants to introduce universes of record types. It is possible to 
introduce type universes for dependent record types, as shown in ||Luo09all ; this, however, cannot be done 
for record kinds. Therefore, record types are more useful than record kinds (for example, in representing 
module types in data refinement [Luo09al). 

Since types have a more sophisticated structure than kinds, it is more difficult to study the meta- 
theoretic properties of a system with record types, as compared with a meta-theoretic study of record 
kinds. As we show in this paper, the approach of using typed operational semantics can be used in this 
endeavour. 



3 Typed Operational Semantics for Dependent Record Types 

The typed operational semantics (TOS for short) is a proof-theoretic method to prove the meta-theoretic 



properties of type theories. It was developed by H. Goguen in his PhD thesis |Gog94|, where he studied 
the meta-theory of UTT and proved that UTT has the nice properties such as Church-Rosser, Subject 
Reduction and Strong Normalisation. 

In this paper, the TOS approach is applied to study the meta-theory of dependent record types. After 
a brief informal introduction of the approach, we develop the typed operational semantics for the system 
IDRT of intensional DRTs and show that it has the soundness and completeness properties. The meta- 
theoretic properties of dependent record types are studied in the next section. 

3.1 The TOS Approach 

For a type theory, its typed operational semantics captures its computational behaviour, usually given by 
its (untyped) reduction relation. For example, in TOS, the following judgement 

r\=M -^N -^P:A 

informally asserts that, among other things, N and P are the weak-head normal form and the normal form 
of the term M, respectively!^ For the logical framework LF, for example, its corresponding TOS has been 
studied | Gog99| | and its inference rules are given in Appendix |B] Since many meta-theoretic properties 



^Formally, the reduction relation and the TOS are related to each other by means of the 'adequacy theorems' such as 



Lemmas 4.4 and 4.5 for IDRT in Section 4.2 
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Basic forms: Abbreviated forms: 

|=r^A r|= o^c 

r\=A-^B r\=M-^^.N:A 
r\=M-^N-^P:A r\=M-^nP-A 

r\=M:A 

Figure 2: Judgement Forms in Typed Operational Semantics 

of a type theory are concerned with its computational behaviour, it is not a surprise that TOS provides an 
effective approach to the meta-theory of type theories]^ 

The TOS and its corresponding type theory are related to each other by means of the soundness and 
completeness theorems. Using the judgement F |= M : A to abbreviate 'F |= M — A/^ — P : A for some N 
and P\ we can state the soundness and completeness properties as follows: 

• Soundness: F h M : A implies F |= M : A' (for A' that is the 'normal form' of A). 

• Completeness: F ^ M : A impUes F h M : A. 

Based on soundness and completeness, we can prove many meta-theoretic properties of the type theory. 
For example, it can be shown that, if F |= M : A', then M is strongly normalisable. Therefore, strong 
normalisation, the property that every well-typed term is strongly normalisable, can be proved by means 
of such a fact together with the soundness property, as pictured as follows: 



p |_ ^ . ^ Strong Ngrmqlisatiqn ^ ^ 



Soundness 



SNfor TOS 



F 1= M : A' 



As shown in this paper, for dependent record types, the SN property for the corresponding TOS is proven 
in Theorem |4. 13 Then, by the Soundness Theorem (Theorem 4.8 1, we can show that strong normalisa- 



tion for IDRT (Corollary [S?!]). 

Note that, to implement such ideas is not a simple matter: it requires one to prove: 

• that the TOS is 'adequate' w.r.t. the (untyped) reduction relation, 

• that the TOS is sound and complete w.r.t. the original type theory, and 

• that the TOS satisfies some specific meta-theoretic properties (e.g., strong normalisation). 

Then, one can transfer the results to the original type theory to show that it has nice meta-theoretic 
properties. This is what we shall do for IDRT, the type theory with dependent record types. 

3.2 TOS for Dependent Record Types 

The typed operational semantics for dependent record types is described in this section. The judgement 
forms in a TOS are given in Figure [2j three of which are the basic forms of judgements whose informal 
meanings are: 



^It is worth noting tliat, altiiough it is useful to study the meta-theory for many type theories, the TOS approach would not 
be suitable for non-normalising type theories. See (Gog94| for discussions. 
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• 1= r — )• A: the context F has context A as its normal form; 

• r 1= A — > B: the kind A is well-formed in context F and has normal form B; and 

• r \= M ^ N ^ P : A: the terms M, N, P are well-formed in context F of kind A and M has 
weak-head normal form and normal form P. 

From these basic judgements, one can define other forms of judgements, including the following: 

• r \= ok stands for ' |= F — )• A for some A' ; 

• r\=M ^„N:A stands for T |= M ^ P : A for some P' ; 

• F 1= M P : A stands for T |= M A/^ P : A for some N' ; and 

• F 1= M : A stands for T |= M A/^ P : A for some A^^ and P'. 

The typed operational semantics for the type system IDRT of intensional DRTs is the extension of that 
for LP (Appendix |B]) with the inference rules given in Figure [3] Most of the rules are self-explanatory. 
We only mention that, besides using the abbreviated forms of judgement (see above) in the rules, we 
also use the terminology of 'pair-record' as introduced in Section |2] For example, in (BASErestr), we 
require that p or qhe not a pair-record, for otherwise, for instance, [p] could be a redex and would not be 
in normal form. 



4 Properties of TOS for Dependent Record Types 



We shall study the properties of the TOS for IDRT, as presented above in Section 3.2 These include those 
properties w.rt. the relationship with IDRT (soundness and completeness) and those w.rt. the reduction 
relation. 

4.1 Basic Structural Properties 

The typed operational semantics satisfy some basic properties as stated in the following lemma, which 
can all be proved by induction on the TOS-derivationsj^ 

Lemma 4.1 

1. ( Context Validity) Any derivation o/Fq, Fi |= / has a sub-derivation o/Fq \= ok. 

2. (Variables) Let dom{T} be the set of variables declared in context F and FV{M) the set of free 
variables occurring in term M. 

(a) //'!= F — 7- A, then dom{A} = <iom{F}. 

(b) IfT 1= A ^ B, then FV{A)[JFV{B) C dom{T]. 

(c) lfr\=M -^N -^P:A, thenFV{M)UFV{N)UFV{P)UFV{A) Cdom{r}. 

3. (Weakening) IfT |= J and F, A |= ok, then F, A |= J. 

4. (Strengthening) If To, z'C,r I \= J and z ^ FV{r[)UFV{J), f/je«Fo,Fi |=7. 

5. (Determinacy) 

• 7f 1= F A and ^ F <I>, then A = 



^Some of the lemmas (e.g., the strengthening lemma) can only be proved by proving a stronger statement by induction on 
derivations. We omit the details here. 
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Record Kinds 



r^ok 



r 1= RType RType 



RTYPE 



r\=ok 



r 1= RType[L\ RType[L] 



RTYPE[L] 



Record Types 



Pair-records 



Restrictions 



Selections 



T^ok 



EMPrcdt 



r\={)^{)^{):RType[<l>] 

r\=R^„P: RType[L] T |= A ^„ B : {P)Type I ^ L 
r\={R,l:A) (/?,/: A) ^ {P,l : B) : RType[LU{l}] 

r^ok 

EMPrcd 



RCDT 



rN(>^()^():0 



rt= (/?,/:A) ^„ {P,l : B) : RType T \= r ->■„ p : P 
r 1= A(r) — )■„ C : Type F |= a — )•„ : C 
r\= {r,l = a:A) ^ {r,l = a:A) ^ {p,l = b:B) : {P,l:B) 

r \= r q p : {P,l : B) p, q not pair-records 



RCD 



Y^[r\^[q\^[p]:P 

r^r~^^ {p,l = b:A) : {P,l :B) F^p^s^f.P 
r\=[r]^s^t:P 



BASErestr 
RESTR 



r \= r ^ q ^ p : {P,l : B) p, q not pair-records 

T^B{[r])^,^C:Type 

r 1= r.l —7- q.l —7- p.l : C 

r 1= r (p, / = : A) : (P, / : B) V^b^c^d-.C T \=A{p) ^„ C : Type 



BASEpLDSEL 



T\=r.l ^ c ^ d :C 

T\=r^nS:{P,l:B) T^[r\.r c ^ d -.C l^l' 
r\=r.l' ^c^d:C 



FLDSEL 



FLDSL' 



Figure 3: Inference Rules of Typed Operational Semantics for IDRT 
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• Ifr\=A-^B and T |= A ^ C, then B = C. 

• Ifr\=M -^N -^P:Bandr\=M -^Q-^R:C, then N = Q, P = Rand B = C. 

Remark The above Lemma [4~Tp |) of 'Determinacy' says that the TOS-normal forms are unique. Of 
course, in order to show that the normal form of a well-typed term (under the usual reduction relation) 
is unique, one has to prove that the TOS -reductions are adequate. This is what we do in the following 
subsection. 

4.2 Adequacy w.r.t. the Untyped Reduction 

We shall show in this section that the notions of computation captured in TOS are adequate w.r.t. the 
usual (untyped) reduction relation, which is defined in the following definition. 

Definition 4.2 (Untyped Reduction for IDRT) The (untyped) one-step reduction over terms, notation 
—7-, is the compatible closurenof the relation given by the following rules: 





{[x:A]M)N - 


■> [N/x]M 






[x:A]M{x) - 


■> M 


(x ^ FV{M)) 


(^i) 


[{r,l = a:A)] - 


■> r 






{r,l = a:A).l - 


-7- a 






{r,l = a:A).r - 


^ r.l' 


{I / /') 



We write — and — )•* for the corresponding transitive closure and reflexive and transitive closure, re- 
spectively. 

A term of the form on the left of an arrow is called a redex. For example, a K2-redex is a term of the 
form {r,l = a : A). I. 

Definition 4.3 (Weak-Head Normal Forms and Normal Forms) 

• A term M is weak-head normal if 

— M = xis a variable; 

— M= [x:K\k; 

— M = f{a), where f is weak-head normal and not an abstraction; 
-M^{); 

— M = {r, I = a: A); or 

— M=[r]orM = r.l, where r is weak-head normal and not a pair-record. 

• A term M is normal ;/ 

— M = xis a variable; 

— M = [x:K]k, which is not an ri -redex, and K and k are normal; 

— M = f{a) and f and a are normal and f not an abstraction; 
-M^{); 

— M = (r, I = a :A) and r, a and A are normal. 

^The compatible closure of a relation R over terms propagates R to all of the terms. We omit its formal definition here; see 
(Gog94[lFenT08 for formal details. 
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- M = [r] or M = r.l, where r is normal and not a pair-record. 

The notions of weak-head normal forms and normal forms are lifted to record types, kinds and contexts 
in the usual way. 

This case was in our original proof of a DRT system with the WER rules, it was of interest because 
the weakly extensional rules are T]-like rules that cause problems, such as strong normalization fails for 
untyped raw terms. For reason of discussion we keep this case still here. The following lemmas show that 
the notion of computation captured in TOS is adequate w.r.t. the untyped reduction and the associated 
notions of normal forms. 

Lemma 4.4 (Adequacy of TOS w.r.t. Untyped Reduction) 

• //T 1= A — 7- C then there exists B such that A — 5-^^ B — t-^ C. 

• IfT \=M -.A, then there exists N' such that M — N -^^^ A^^' P. 
Proof. By induction on derivations. 

Lemma 4.5 (Adequacy of TOS w.r.t. Normal Forms and WHNFs) 

• //' 1= r — 7- A, then A is normal. 

• T/T 1= A — 7- B, then B is normal. 

• IfT \=M ^ N ^ P :A, then N is weak-head normal and P and A are normal. 
Proof. By induction on derivations. 

4.2.1 Soundness and Completeness 

The TOS we have studied is sound and complete w.r.t. the type system IDRT of dependent record types. 
In the informal introduction to TOS in Section |3.1[ we have over-simplified the situation. In fact, what 
we shall do is to show that completeness holds for a simpler system IDRT (with judgements of the 
form r /), which is obtained from IDRT by removing the seven substitution rules in Appendix [a] 
Therefore, the soundness and completeness may be pictured as follows: 



h/ 5 ^ h- 

Soundness 



Completeness 



Theorem 4.6 (Completeness of TOS w.r.t. IDRT ) 

• Ifr\=ok then F valid. 

• //F 1= A ^ B then F A kind and F A = B. 

• Ifr\=M -^N -^P-.AthenVh- M ■.A,rh- M = N :A, Fh- M = P : A andTh- A = A. 
Proof. By simultaneous induction on derivations and examining each case of the TOS inference rules. 

Corollary 4.7 (Completeness of TOS w.r.t. IDRT) 

• IfT\=ok then h F valid. 

• Ifr\=A^BthenrhAkindandr\-A=B. 
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Ifr^M^N^P:AthenrhM:A,rhM = N:A,rhM = P:AandrhA=A. 



Proof. By Theorem 4.6 and the inclusion of IDRT in IDRT. 



The Soundness Theorem is harder to prove. We have to consider all the inference rules of IDRT 
including the structural rules. In the following, we only consider some selected cases. The detailed proof 
can be found in HFenlOl . 

Theorem 4.8 (Soundness of TOS w.r.t. IDRT) 

• IfTh ok, then there exists A such that ^ F — )■ A. 

• lfT\- A kind, then there exists B such that F |= A — t- B. 

• lfT\-A = B then there exists C such that F |= A — )• C and T \= B ^ C. 

• IfT^ M -.A then there exist P, B such that F |= A — > B and F |= M — P : B. 

• IfT hM = N -.A, then there exist P, B such that F |= A B, and F |= M P : B, F |= ->„ P : B. 



Proof. By induction on derivations. For the cases of LF-rules, see |Gog99|. We consider the following 
two cases about record types. 

• The second introduction rule in Figure [T] 

F h (P, Z : A) : RType F h r : P F h a : A(r) 
F h (r, Z = a : A) : (P, / : A) 

By induction hypothesis, the following hold: 

1. F 1= (P, / : A) {P, l-B) : RType for some P and B, 

2. F 1= r : P' and F 1= P P' : RType[L] for some p, P' and L, and 

3. F 1= a — b : C and F |= A(r) — C for some b and C. 

By Lemma [4Tp |) (Determinacy) and inversion of the rule (RCDT) in Figurejs} P = P'. Therefore, 
by rule (PCD) in Figure|3} T \= {r,l = a : A) {p,l = b : B) : (P, l:B). 

• The third elimination rule in Figure [TJ 

Fhr:(P, I -.A) Fh [r]./':B 1^1' 
F h r.l' : B 

By induction hypothesis, the following hold: 

1. F 1= r 5 : (P, / : B) and F |= (P, I : A) ^ {P,l : B) for some s, P and B, and 

2. F 1= [r].l' c : C and F 1= B C for some c and C. 
Since / / by {FLDSL') in Figure [3j we have F ^ r.l' -^nC:C. 

4.3 Strong Normalisation in TOS 

The strong normalisation property of the TOS says that, if a term M is well-typed in the TOS (i.e., 
F 1= M : A), then M is strongly normalisable. This result, together with the soundness theorem, will then 
be enough to show that the original type theory has the property of strong normalisation. 

The strong normalisation property of the TOS by introducing a notion of parallel reduction and 
showing that it has the so-called Parallel Subject Reduction property. 
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VAR A - — — APP — — — - 

x^x [x:A]M [x:A']M' M{N) M'{N') 

M^M' N^N' Mq^M'{x) x^FV{M') 

^ {[x:A]M){N) [N'/x]M' ^ [x:Ai]Mo^M' 

R^R' A^A' 

RCDTemp n K RCDT 



0^0 (/?,/:A)^ (/?',/: A') 

r =^> / a^a' A^A' 

r ^ r' r ^ / 

BASEreSTR n TTT BASEfLDSEL 



RESTR —. ^ : FLDSEL 



[{r,l = a : A)] ^ r' {r,l = a : A) .1 ^ a' 



FLDSL' 



{r,l = a:A).r ^r'.r 



Figure 4: Parallel Reduction for IDRT 

Definition 4.9 (Parallel Reduction) Parallel reduction =^ is defined as the least relation closed under 
the rules in Figure^ and is extended in an obvious way to kinds and contexts. 

Remark Parallel reduction has some simple properties. First, M M for all M. Furthermore, if M — )• 
then M ^ A^, and if M ^ then M N. Finally, if M ^ M' and ^ A^' then [N/x]M [N'/x]M'. 

Lemma 4.10 (Parallel Subject Reduction) 

1. If\=r^Aandr^r', thenar' ^ A. 

2. IfT '^A^B,T=>T' andA=> A', then V |= A' B. 

3. Ifr\=M^N^P:A, r =^ r and M =^ M', then there exist N' and N" such that N =^ A^', 
r' ^ M' ^ A^" ^ P : A and T' |= N' ^ N" ^ P : A. 

Proof. By simultaneous induction on derivations. The detailed proof can be found in MFenlOI . 

Lemma 4.11 (Subject Reduction) IfT\=M^N^P:A, r=^r' and M =^ M', then there exists N' 
such that T"^M' ^N' ^P:A and N N'. 



Proof. By simultaneous induction on derivations, using Lemma 4.10 



The proof of strong normalisation of the TOS (Theorem 4.13 1 uses the following lemma. 
Lemma 4.12 

• IfM is weak-head normal and not an abstraction and M — t-* A^, then N is weak-head normal and 
not an abstraction. 
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• If M is weak-head normal and not a pair record and M — t-* A^, then N is weak-head normal and 
not a pair record. 

Proof. By induction on length of reduction for untyped terms. 

Theorem 4.13 (Strong Normalisation of TOS) 

1. //T 1= A — 7- B then A is strongly normalisable. 

2. IfT\=M^N^P:A then M is strongly normalisable. 

Proof. By simultaneous induction on derivations. The full proof can be found in BFenlOI . We shall 
consider one of the most difficult cases - when the last rule used is (BASErestr) in Figure [5} 

T \= r ^ q ^ p : {P, I : B) p, q not pair-records 
rh[r]^[q]^[p]:P 

By induction hypothesis, r is strongly normalisable. It suffices for us to show that [r] is strongly normal- 
isable if F 1= r q : {P,l : B) such that q is not a pair-record. We do this by induction on the maximal 
length of reductions starting from r. 

Assume that r ^ ri. We then have r^ri, which implies by Lemma 4.10 (Parallel Subject Reduc- 
tion) that there exist r' and r" such that 

F|=ri^„.r":(P,/:B), F ^ r' ^„ r" : {P,l : B), and q^r'. 



We therefore have that q is weak-head normal (by Lemma 4.5 1 and that q — )•* r' (see the remark above). 
From these and Lemma |4.12| we have 

(*) r' is weak-head normal and not a pair-record. 



Furthermore, by Lemma 4.4 we have 
(**) / ^* r". 



From (*) and (**), r" is not a pair-record by Lemma 4. 12 Therefore, since F |= ri -^^ r" : {P,l : B), we 
conclude by induction hypothesis that [r\] is strongly normalisable. 



5 Meta-theoretic Properties of IDRT 



From the properties of the TOS that have been proved in the last section, the meta-theoretic properties 
of IDRT, the type theory for dependent record types, can be proved. Here, we give the theorems for 
Subject Reduction, Church-Rosser and Strong Normalisation. (For further details and other properties, 
see llFenlOJ .) 



Theorem 5.1 (Subject Reduction for IDRT) IfFh M -.AandM 
Proof. First of all, we have F \= M : A (by the Soundness Theorem 4.8 1 and M 



N, then F h : A. 

A'^ (since M 



N). 



Therefore, by Lemma 4. 1 1 we have F |= : A. Now, by Completeness (Theorem 4.7 1, F h A^ : A 



Theorem 5.2 (Strong Normalisation for IDRT) 

1. IfT valid, then F is strongly normalisable. 

2. IfTh A kind, then A is strongly normalisable. 
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3. IfT\-A=B, then both A and B are strongly normalisable to some C. 

4. IfT\- M \ A, then M and A are strongly normalisable and T\- P .B, where P and B are the normal 
forms ofM and A, respectively. 

5. IfT\-M = N'.A, then both M and N are strongly normalisable to some P, A is strongly normalis- 
able to some B such that Fh P . B. 



Proof. By the Soundness Theorem 4.8 and Theorem 4.13 



Theorem 5.3 (Church-Rosser for IDRT) IfrhM = N:A, then M ^* P and N P for some P. 



Proof. By Soundness (Theorem ^Sjl, there exist P and B such that T |= M P : B and T ^ P : B. 
Then, by Adequacy (Lemma |4.4[), we have M ^* P and N P. 



6 Conclusions 



We have studied the meta- theory of a type theory with dependent record types, by studying its typed 
operational semantics. As we have mentioned in Section |2} dependent record types are rather different 
from dependent record kinds, with the former having a much richer structure and being more difficult to 
study. The meta-theory of dependent record kinds has been studied by Coquand et. al [CPT05], where 
they have given a proof of termination of type-checking. As far as we know, ours is the first attempt 
to study the meta-theory of dependent record types formulated in a logical framework IIPol021 ILuo09bl 
|Luo09al . In the light that the TOS-approach has been successfully applied to the meta-theoretic study of 
type theories with T] -equality [Gog99J and with inductive types |Gog94| |, the current work can be used 
to justify the incorporation of dependent record types in a full-scale type theory as implemented in the 
proof assistants such as Agda and Coq. 

The dependent record types studied in this paper are intensional in the sense that we do not have the 
following extensional equality rules ||BT98[ |Luo09bi : 

rhr:{R,l:A) rhr':{R,l:A) 
rhr: rh [r] = [/] : R F h r.l = / .1 : A{[r]) 
rhr = : rhr = /:(/?,/: A) 

They basically say that two records are computationally equal if their components are. For instance, from 
the second rule above, we would have (r, / = r.l) = r for any r of type {R, I : A). It is unclear whether 
the TOS-approach as adopted in this paper can be applied to such (weakly) extensional record types. It 
would be obviously problematic if one considered the reduction relation for the records as follows: 

(r, / = r.l) — )■ r 

for, together with the T] -reduction for A -terms, the Church-Rosser property would fail to hold. A natural 
question arises here: would it possible if one takes the TOS-approach by considering a reduction relation 
that treats T]-long normal forms (e.g., by taking the above reduction in the other direction)? This involves 
the development of the TOS-approach to incorporate Tj-long normal forms and research is needed to see 
whether it is possible. 
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A Inference Rules of LF 

The inference rules of the logical framework LF are given below. (See Chapter 9 of ||Luo941 for further 
details.) 

Contexts and assumptions 

VrK kind x ^ FV(r) T,x:K,V valid 
valid T^x.K valid V.,x.K^T' x:K 

General equality rules 

TV K kind rhK = K' rhK = K'rhK' = K" 

rhK = K rhK' = K rhK = K" 

rhk:K rhk = k':K F h k = k' : K Fh k' = k" : K 
rhk = k:K rhk' = k:K rhk = k":K 

Equality typing rules 

T^k-.KT^ K = K' rhk = k' -.KTh K = K' 
rhk:K' rhk = k':K' 
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Substitution rules 

r,x:K,r' validTh k:K 



r, [^/x]r' valid 

r,x:K, r h K' kind rhk:K r,x:K, V h K' kind rhk = k':K 
r, [k/x]r h [k/x]K' kind F, [k/x]r h [k/x]K' = [k'/x]K' 

r,x:K,r hk' :K' rhk:K r,x:K,r h k' : K' F h ki = k2 : K 



r, [k/x]r h [k/x]k' : [k/x]K' F, [ki/x]F' h [ki/x]k' = [k2/x]k' : [ki/x]K' 

F,x:K,F' hK' = K"Fhk:K F,x:KX h k' = k" : K' Fh k : K 

F, [k/x]F' h [k/x]K' = [k/x]K" F, [k/x]F' h [k/x]k' = [k/x]k" : [k/x]K' 



The kind Type 



F valid FhA:Type F\-A = B:Type 
FhType kind FhEl{A) kind Fh El{A) = El{B) 

Dependent product kinds 

F\-K kind F,x:K h K' kind FhKi=K2 F,x:Ki h K[ = K!^ 
r h {x:K)K' kind Fh {x:Ki)K[ = {x:K2)K'^ 

F,x:K hk:K' FhKi=K2 F,x:Ki hki=k2:K 



F h [x:K]k : {x:K)K' F h [x:Ki% = [x:K2]k2 : {x:Ki)K 

r h / : {x:K)K' Fhk:K Fhf = f: {x:K)K' Fhki=k2:K 
Fhf{k):[k/x]K' Fhf{h)=f'ik2):[h/x]K' 

F,x:K hk' -.K' Fhk:K Fhf: (x:K)K' x ^ FV{f) 



Fh {[x:K]k'){k) = [k/x]k' : [k/x]K' Th [x:K\f{x) = f : {x:K)K' 

B Inference Rules of Typed Operational Semantics for LF 



The inference rules of the TOS for LF are given below. (See |Gog99 Gog94| for further details.) 



Contexts 



Tenns 



, F-^ A F\=A-^ B x4dom{F} 
EMP ^ — ^ ■ — ^ ^ WEAK 



1=0^0 ^F,x:A^A,x:B 
Kinds 

F\=ok F\=M^N^P:Type 

TYPE — — — ^ EL 



F\= Type Type F \= El{M) El{P) 

r|=Ai F,x:Ai \=A2^B2 



F\= {x:Ai)A2^{x:Bi).B2 

ro,x:A,ri \=A-^B 
Fo,x:A,F] 1= X — )• X — )■ X : B 



PI 



VAR 



46 



Typed Operational Semantics for Dependent Record Types 



r 1= Ai -)• Si r,x:Ai 1= Mo Pq : B2 [x:Bi]Po not t] - redex 
r \= [x:Ai]Mo [x-Ai]Mo [x:Bi]Po : (x:Bi)B2 

r ^ Ai ^ Bi r,x:Ai 1= Mo :B2 T^P-^P^P: (x:Si)S2 



r ^ [x:Ai]Mo ^ [x:Ai]Mo ^ P : (x:Si)S2 

r ^ Ml ^ M ^ Pi : {x:Bi)B2 T |= M2 -> A^2 ^ ^2 : Si 
r 1= [M2/x]S2 -^C Ni not abstraction 

r ^ Ml (M2) ^ Ni (M2) ^ Pi (P2) : C 



£TA 



SA5£: 



r ^ Ml [x:Ai]A^o : (^:5i)B2 T |= M2 : 5i 
r \= [M2/x\No ^ P ^ e : C r 1= [M2/x]S2 ^ C 
r^Mi(M2)^P^2:C 



s£:rA 



